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Amendments to the Claims ; 

This listing of claims replaces all prior versions and listings of claims in the application. 

Listing of Claims : 

L (Currently Amended) A method for autonomic administration isolation for a 
secure remote management in a computer network, the method comprising &e-steps~ef : 

(a) isolating administrative access to a plurality of client systems in a computer 
network via a data center; and 

(b) utilizing the data center to control remote initiation of services in the plurality of 
client systems by an administrative administrator syste m, the administrator system beinga 
computer through which an administrator manages at least one of the plurality of client systems, 
wherein utilizing the data center further includes. 

(M) verifying authentication of the administrator system bv the data center . 

2. (Cancelled) 

3. (Currently Amended) The method of claim 1 wherein the utilizing step fb^ further 
comprises 2 furt h er comprising th o st ep of (b2) receiving a service command commands from the 
authenticated administra tive administrator system in the data center. 

4. (Currently Amended) The method of claim 3 wherein the utilizing step fbl further 
comprises farther comprising the stop of (b3) determining in the data center whether the 
authenticated adminigtra ti vo administrator system has authorization to perform the service 
command commands in the at least one managed client system systems . 
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5. (Currently Amended) The method of claim 4 wherein the utilizing s tep (V) further 
comprises furth e r oomprising tho stop of (b4) issuing a trusted message m o saa g oc from the data 
center to the at least one managed client system cystoma when the authenticated administrativ e 
administrator system does have authorization to perform the service command comman d s . 

6. (Currently Amended) The method of claim 5 further comprising (c) validating 
and decrypting the trusted message m e ssag e s in the at least one managed client system s ystems to 
perform the service command commands . 

7. (Currently Amended) An autonomic system for selective administration isolation 
for secure remote management in a computer network, the system comprising: 

a network; 

at least one administrator system coupled to the network , the at least o ne administrator 
system operable to transmit one or more service commands for managinE one or more client 
systems ; 

at least one client system coupled to the network; and 

a data center coupled to the at least one administrator system and to the at least one client 
system via the network, the data center for: 

isolating administrative access to the at least one client system and controlling 
remote initiation of services in the at least one client system by the at least one 
gKimimstra tive administrator system including, 
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receiving a service command from the at least one administrator system, 
the service command having been issued after authentication of a first user 
associated with the at least one administrator system: and 

issuing a trusted message to remo tely control the at least one client system 
according to the service command, the trusted message having been issued after 
authentication of a second user associated with the data center, wherein the first 
user is different from the second user . 

8. (Original) The system of claim 7 wherein the at least one administrator system 
includes authentication capabilities via an embedded security chip for unique system 
identification and biometric identification for unique user identification. 

9. (Currently Amended) The system of claim 7 wherein the data center verifies t 
authentication of the at least one admiakfe a#ve administrator system. 

1 0. (Currently Amended) The system of claim 7 9 wherein the authentication of a 
second user associated with the data center includes a user ID and password known only to the 
data center and an agent running on the at least one client system, the authenticated - at least one 
administrative oystom sends sarvico commands to the data cent e r, 

1 1 . (Currently Amended) The system of claim 9 43 wherein the data center 
determines whether the authenticated administrative administrator system has authorization to 
perform the service ftrmimand commands in the at least one client system prior to issuing the 
trusted message to the at least one client system . 
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12. (Cunently Amended) The system of claim 1 1 wherein the data center issues a 
trusted message aa ossag e s to the at least one client system when the authenticated administra tive 
administrator system does have authorization to perform the service command commands . 

13. (Currently Amended) The system of claim 12 wherein the at least one client 
system validates and decrypts the trusted message mes sages to perform the service command 
commands . 

14. (Original) The system of claim 9 wherein the network further comprises a world 
wide web network. 

15. (Currently Amended) A computer readable medium containing program 
instructions for autonomic administration isolation in a computer network for a secure remote 
management, the program instructions for: 

(a) isolating administrative access to a plurality of client systems in a computer network 
via a data center; and 

(b) controlling remote initiation of services in the plurality of client systems by an 
ndmrtirtrntwe administrator system via the data cente r, the administrat or system being a 
computer through which an administrator manages at least one of the plurality of client systems, 
wherein controlling remote initiation of services via the data center includes. 

fbH verifying authentication of th e adminis trator system bv the d ata center. 

16. (Cancelled) 
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17. (Currently Amended) The computer readable medium of claim 15 46 wherein 
controlling remote initiation of services via the data center further includes c omprising (b2) 
receiving a service command commands from the authenticated administrat ive administrator 
system in the data center. 

18. (Currently Amended) The computer readable medium of claim 17 wherein 
controlling remote initiation of services via the data center farther includes e emprising (b3) 
determining in the data center whether the authenticated administrativ e administrator system has 
authorization to perform the service command commands in the at least one managed client 
system s yst e m s. 

1 9. (Currently Amended) The computer readable medium of claim 1 8 wherein 
controlling remote initiation of services via the data center further includes comprising (M) 
issuing a trusted message m e ssag es from the data center to the at least one managed client system 
syst e ms when the authenticated administra tive administrator system does have authorization to 
perform the service command command s. 

20. (Currently Amended) The computer readable medium of claim 19 farther 
comprising (c) validating and decrypting the trusted message mess ages in the at least one 
managed client system systems to perform the service command commands . 

21. (New) The method of claim 1, wherein: 

the administrator system includes an embedded security chip; and. 
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verifying authentication of the administrator system includes identifying a unique 
identifier associated with the embedded security chip* 

22. (New) The computer readable medium of claim 1 5, wherein: 
the administrator system includes an embedded security chip; and 

the program instructions for verifying authentication of the administrator system includes 
instructions for identifying a unique identifier associated with the embedded security chip. 

23. (New) A system for secure remote management in a network, the system 
comprising: 

an administrator system coupled to a network, the administrator system being a computer 
through which an administrator transmits a service command for managing a client system; 
a client system coupled to the network; and 

a data center coupled to the administrator system and to the client system through the 
network, the data center operable to, 

receive a service command from the administrator system; and 
determine whether the administrator system has administrative access to the client 
system including verifying authentication of the administrator system; 
if the administrator system has administrative access to the client system, then the data 
center is further operable to control remote initiation of a service in the client system based on 
the service command received from the administrator system. 
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